# worldllbrteyflnance.online — MALICIOUS

> Avoid worldllbrteyflnance.online—this high-risk phishing domain is offline but flagged by multiple security tools. Stay vigilant against scams.

## Summary
PhishDestroy identifies worldllbrteyflnance.online as a high-risk phishing domain designed to deceive users and harvest sensitive information. Classified under generic phishing threats, this domain posed significant risks before being taken offline, potentially targeting victims with fraudulent financial schemes.

The domain was registered on February 21, 2026, through a dead domain registrar, which often indicates low legitimacy and increased risk. It appeared on three separate security blocklists, reflecting widespread recognition of its malicious intent. Additionally, 14 out of 95 security vendors on VirusTotal flagged this domain, reinforcing its association with phishing activity. The combination of these factors highlights the domain's use as part of a broader threat infrastructure aimed at exploiting unsuspecting users.

Currently, worldllbrteyflnance.online is offline, reducing immediate risk. However, users should remain cautious with similar suspicious domains, especially those with irregular naming patterns and questionable registration details. It is advisable to avoid clicking unknown links or providing personal data on untrusted sites. PhishDestroy recommends maintaining updated security software and consulting reputable blocklists to stay protected from evolving phishing threats.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 530)
- Page title: World Liberty Financial | Airdrop

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- IP: 104.21.64.1
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- SSL Issuer: WE1

## Detection Status
- VirusTotal: 14 vendors flagged
  Vendors: ["ChainPatrol", "alphaMountain.ai", "BitDefender", "CRDF", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Google Safebrowsing", "Gridinsoft", "Lionic", "Seclookup", "SOCRadar", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/0199350f-e99d-72ef-a88b-1c99c0c5125e.png
- PhishDestroy: https://phishdestroy.io/domain/worldllbrteyflnance.online/
- LLM endpoint: https://phishdestroy.io/domain/worldllbrteyflnance.online/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/worldllbrteyflnance.online/
Last updated: 2026-03-19